
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft
File: FTyehIfJi0U_l08gMX7OPXD01d0.mft (raw, json)
Hash identifier: NxjbZA8KBXkxiusOvKLpc2b4xCIzVf6H0TKbB+LoG3M=
Subject key identifier: AC:8E:0B:77:DD:EB:F9:0D:54:F9:3C:0A:9C:EB:66:F0:0D:A7:3E:E0
Authority key identifier: 15:3C:9E:84:87:C9:8B:45:3F:97:4F:20:31:7E:CE:3D:70:F4:D5:DD
Certificate issuer: /CN=153c9e8487c98b453f974f20317ece3d70f4d5dd
Certificate serial: 0198D6CD79544B4090339FF6832EAD1E703F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft
Manifest number: 0B85
Signing time: Sat 23 Aug 2025 12:00:46 +0000
Manifest this update: Sat 23 Aug 2025 12:00:46 +0000
Manifest next update: Sun 24 Aug 2025 12:00:46 +0000
Files and hashes: 1: FAFOi_MWA5Fo0z_m3gqA-yNR33M.roa (hash: icR2KPf1nufIDLG/nPNr5vKSnrpkA3b1gplItzO6jeQ=)
2: FTyehIfJi0U_l08gMX7OPXD01d0.crl (hash: S9SmHxZjskh6PHSnTJTUSxrYIMW9TJ2l+RcMCC6mEv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:79:54:4b:40:90:33:9f:f6:83:2e:ad:1e:70:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153c9e8487c98b453f974f20317ece3d70f4d5dd
Validity
Not Before: Aug 23 12:00:46 2025 GMT
Not After : Aug 24 12:00:46 2025 GMT
Subject: CN=ac8e0b77ddebf90d54f93c0a9ceb66f00da73ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2d:0f:34:72:50:79:51:8c:c9:29:1f:3a:85:
73:4e:88:49:d2:64:f4:30:ca:5c:5a:7a:94:a9:72:
bd:b8:47:ca:32:32:a3:5a:b0:39:c7:14:cb:60:21:
f7:2b:51:5d:a3:71:8e:b8:25:61:cf:41:5d:27:66:
0e:5c:d9:3e:4d:2b:65:a9:71:c1:c0:c8:0a:bf:ef:
27:e7:8c:4e:25:cb:d7:a5:1e:0b:d7:ea:c4:0c:a9:
ce:02:6b:d2:55:93:1b:9d:a5:c1:6b:96:27:88:e4:
52:24:b4:33:99:26:10:9a:ae:12:67:50:28:50:05:
7d:72:72:9b:97:87:b3:9c:48:19:8d:ca:9c:88:21:
17:32:80:f1:c3:94:88:00:ae:ba:71:f3:49:e1:33:
28:38:2f:cc:3e:fa:9f:6c:7b:e5:88:be:d8:7e:65:
13:bb:e6:13:65:7a:22:bb:6e:8c:75:34:b9:c2:ed:
05:04:52:a3:b8:bd:d8:a6:e3:cf:13:d0:1b:b4:9c:
c5:71:65:89:4c:c6:eb:f4:6b:dd:0c:80:1c:1b:d9:
99:7a:a9:bf:50:d6:35:52:d9:3d:2f:92:97:9f:b8:
39:4b:c3:73:c4:da:11:06:92:49:d5:2f:f0:39:8a:
66:00:92:cf:c5:da:d4:fa:76:01:32:f2:dd:56:a5:
5c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8E:0B:77:DD:EB:F9:0D:54:F9:3C:0A:9C:EB:66:F0:0D:A7:3E:E0
X509v3 Authority Key Identifier:
keyid:15:3C:9E:84:87:C9:8B:45:3F:97:4F:20:31:7E:CE:3D:70:F4:D5:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ce:79:91:dd:6a:b5:27:1a:fe:41:8b:ca:5d:c7:d0:30:1f:
23:07:3b:2b:04:0d:41:af:6f:62:b9:20:78:6c:ca:dd:86:3d:
77:2a:92:48:80:1f:10:ef:8e:e7:cd:3e:b1:b7:cc:df:b0:d6:
71:fd:84:c4:aa:6f:b8:03:ed:98:93:1e:dd:a1:e7:5f:a9:1b:
77:b3:eb:aa:97:71:e3:cf:37:9e:fa:f9:9a:5d:a5:da:43:cd:
ba:35:f2:0c:0a:40:73:04:ea:80:8b:93:e9:32:67:5c:5d:55:
5c:69:52:e8:7d:93:7b:2b:52:26:d4:ef:9d:82:3f:e7:a3:4c:
b2:f8:cd:f3:15:d0:ae:49:67:eb:6e:38:b8:b6:84:63:70:42:
ba:d3:10:55:9a:df:68:4a:a5:f8:77:52:19:86:5a:60:66:c8:
8f:71:db:1b:51:df:c1:0b:22:80:e4:2d:75:79:68:8c:bc:25:
d0:0f:c1:1a:f1:66:b7:2e:f9:a8:fc:d6:b8:de:de:b0:1c:49:
3d:04:8d:a9:db:ff:9d:da:ba:7b:16:16:df:92:fb:3a:b0:6f:
ba:ed:16:8b:90:9c:c2:16:07:67:21:bd:b1:ce:af:e0:0e:d5:
20:31:53:8b:d0:47:29:e9:ed:25:e7:88:23:58:cc:d0:29:5f:
20:c7:39:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:40:43 2025 by rpki-client